Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
File: zQPRPdJvAESig_xqEedWoqK1aRs.mft (raw, json)
Hash identifier: /lVSNucwZ1iF1QdahbTwQumb+GsinEt9ISP4/3GRpag=
Subject key identifier: 83:97:A1:FD:51:E8:34:8C:6D:7E:6A:28:81:66:B7:6C:0C:42:B6:C1
Authority key identifier: CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
Certificate issuer: /CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Certificate serial: 01A08B9F55A59B49AF3F00553DDF3E1380B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
Manifest number: 054E
Signing time: Thu 10 Sep 2026 14:01:10 +0000
Manifest this update: Thu 10 Sep 2026 14:01:10 +0000
Manifest next update: Fri 11 Sep 2026 14:01:10 +0000
Files and hashes: 1: DV_1PU5sghttOAyD5Fk0auja6M4.roa (hash: vyYX2XFHKs4PfXvL2MDa+XaKNUQzIY/+9Y9TmVp9CiU=)
2: zQPRPdJvAESig_xqEedWoqK1aRs.crl (hash: aOvUxKazX3n8lqJ0pa/nZ7j9yG+zIIUGZ3t+5xFNdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:55:a5:9b:49:af:3f:00:55:3d:df:3e:13:80:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd03d13dd26f0044a283fc6a11e756a2a2b5691b
Validity
Not Before: Sep 10 14:01:10 2026 GMT
Not After : Sep 11 14:01:10 2026 GMT
Subject: CN=8397a1fd51e8348c6d7e6a288166b76c0c42b6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:92:ad:8c:99:d6:88:03:a3:fe:32:4b:9e:
87:0f:25:08:2f:2a:6a:91:89:bf:2c:71:01:49:e6:
0c:86:68:61:c3:e3:66:42:5b:d7:75:69:2b:5d:45:
bd:19:85:37:ce:5c:58:22:bc:07:54:8c:18:62:a5:
0e:77:3f:5e:4f:f2:28:f6:ee:4b:f6:d1:3e:64:76:
18:b0:65:97:8a:5e:f4:b2:ab:0c:05:87:e9:cb:32:
3c:4e:5e:50:e1:47:83:a6:1f:9d:89:99:a8:f7:67:
cd:07:c5:79:87:5e:ac:a6:40:9f:5d:1c:7b:76:46:
e1:49:ee:9b:6f:23:0c:21:e4:21:55:7f:a3:c5:93:
65:c4:f5:4a:c5:d5:bb:ef:6c:6c:49:9f:79:3f:d3:
ef:51:7f:0e:cb:67:ea:a3:e9:cc:45:4a:4f:90:0e:
67:d3:2c:94:f6:d5:34:9a:81:70:38:0b:4b:25:cf:
8a:15:d1:af:49:54:81:24:43:f9:a3:ec:c6:e1:e8:
b2:58:21:58:19:f0:8d:01:36:bc:24:c8:26:ae:bc:
bd:38:80:66:b3:7f:39:b0:db:ce:b9:62:a4:de:ad:
1c:de:33:fe:06:7e:49:2f:fc:fc:c6:84:84:83:3f:
5d:45:18:ff:a4:1d:35:c9:09:9d:d4:34:06:11:6c:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:97:A1:FD:51:E8:34:8C:6D:7E:6A:28:81:66:B7:6C:0C:42:B6:C1
X509v3 Authority Key Identifier:
keyid:CD:03:D1:3D:D2:6F:00:44:A2:83:FC:6A:11:E7:56:A2:A2:B5:69:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQPRPdJvAESig_xqEedWoqK1aRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfd41e-398d-4f1b-9995-1a3ff532bc20/1/zQPRPdJvAESig_xqEedWoqK1aRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:1f:60:18:9a:55:8a:8c:90:53:d7:75:be:71:6a:fd:fe:d8:
df:71:a2:cb:33:2b:1a:84:96:a7:65:62:5f:69:69:e0:6b:29:
02:a2:93:64:28:21:f6:e5:f2:69:ae:22:ea:f2:64:76:3f:32:
77:6f:46:16:bb:6f:fa:28:34:7d:cc:58:8b:7f:43:bc:d5:d0:
66:b3:97:90:83:b5:dc:c2:c2:f6:1f:84:93:24:cf:aa:87:18:
fe:3b:f2:37:a3:62:63:8b:d9:7d:f8:78:7c:85:e8:71:1f:29:
33:77:9d:50:2e:15:57:0c:98:d4:e4:56:5e:c9:b2:b1:c8:ce:
32:ae:92:a0:85:05:a4:c0:41:6b:7b:d4:d8:5f:a8:97:ac:91:
99:60:1c:bc:c6:ca:3e:9b:ba:ee:e8:af:77:e2:5f:c4:f0:9a:
20:df:c5:c3:cf:a1:ee:1b:5e:2d:af:65:7d:ae:4a:db:ab:a7:
82:eb:44:db:da:a3:f5:b9:f6:ec:ac:c1:7a:0c:d2:5e:be:8b:
18:3f:5e:a5:a3:de:4e:c7:b8:41:74:ff:77:61:20:be:86:32:
92:c3:fb:82:3b:28:eb:27:c8:c9:ce:47:6c:d9:50:f6:ef:4d:
c6:f8:ad:dc:c4:c6:af:e7:af:16:b5:04:98:82:9e:bb:1b:68:
b8:a6:ab:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:26:09 2026 by rpki-client